Published: 03/11/2004 Updated: 30/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The unix_clean_name function in Samba 2.2.x up to and including 2.2.11, and 3.0.x prior to 3.0.2a, trims certain directory names down to absolute paths, which could allow remote malicious users to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames.

Vendor Advisories

Synopsis samba security update Type/Severity Security Advisory: Important Topic Updated samba packages that fix an input validation vulnerability are nowavailable Description Samba provides file and printer sharing services to SMB/CIFS clientsKarol Wiesek discovered an input validation is ...
A vulnerability has been discovered in samba, a commonly used LanManager-like file and printer server for Unix A remote attacker may be able to gain access to files which exist outside of the share's defined path Such files must still be readable by the account used for the connection, though For the stable distribution (woody) this problem has ...